wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09,
    4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform
    4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS
    Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity
    expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a
    crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity
    references, a similar issue to CVE-2003-1564. (CVE-2011-1483)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1303 advisory.

    The jbossws-common package provides JBoss Web Services Native, a web     service framework included as part of JBoss Enterprise Web Platform. It     implements the JAX-WS specification.

    It was found that JBoss Web Services Native did not properly protect     against recursive entity resolution when processing Document Type     Definitions (DTD). A remote attacker could exploit this flaw by sending a     specially-crafted HTTP POST request to a deployed web service, causing     excessive CPU and memory consumption on the system hosting that service. If     the attack is repeated to consume all available network sockets, the server     will become unavailable. This flaw did not affect systems using JBoss Web     Services CXF (provided by jbossas-ws-cxf-ewp). (CVE-2011-1483)

    Warning: Before applying this update, please back up your JBoss Enterprise     Web Platform's jboss-as-web/server/[PROFILE]/deploy/ directory, along     with all other customized configuration files.

    Users of JBoss Web Services Native should upgrade to this updated package,     which corrects this issue. The JBoss server process must be restarted for     this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated jbossas packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.2.0.CP09 for Red Hat Enterprise Linux 4 and 5.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

JBoss Enterprise Application Platform is the market-leading platform for innovative and scalable Java applications. JBoss Enterprise Application Platform integrates the JBoss Application Server with JBoss Hibernate and JBoss Seam into a complete and simple enterprise solution. JBoss Web Services Native is a web service framework included as part of JBoss Enterprise Application Platform. It implements the JAX-WS specification.

It was found that JBoss Web Services Native did not properly protect against recursive entity resolution when processing Document Type Definitions (DTD). A remote attacker could exploit this flaw by sending a specially crafted HTTP POST request to a deployed web service, causing excessive CPU and memory consumption on the system hosting that service. If the attack is repeated to consume all available network sockets, the server will become unavailable.
(CVE-2011-1483)

Warning: Before applying this update, please back up your JBoss Enterprise Application Platform's 'server/[configuration]/deploy/' directory, along with all other customized configuration files.

Users of JBoss Enterprise Application Platform 4.2.0.CP09 on Red Hat Enterprise Linux 4 and 5 should upgrade to these updated packages, which correct this issue. The JBoss server process must be restarted for this update to take effect.

An updated jbossws-common package that fixes one security issue is now available for JBoss Enterprise Application Platform 4.3 for Red Hat Enterprise Linux 4 and 5.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The jbossws-common package provides JBoss Web Services Native, a web service framework included as part of JBoss Enterprise Application Platform. It implements the JAX-WS specification.

It was found that JBoss Web Services Native did not properly protect against recursive entity resolution when processing Document Type Definitions (DTD). A remote attacker could exploit this flaw by sending a specially crafted HTTP POST request to a deployed web service, causing excessive CPU and memory consumption on the system hosting that service. If the attack is repeated to consume all available network sockets, the server will become unavailable.
(CVE-2011-1483)

Warning: Before applying this update, please back up your JBoss Enterprise Application Platform's 'jboss-as/server/[PROFILE]/deploy/' directory, along with all other customized configuration files.

Users of JBoss Enterprise Application Platform 4.3 for Red Hat Enterprise Linux 4 and 5 should upgrade to this updated package, which corrects this issue. The JBoss server process must be restarted for this update to take effect.

An updated jbossws-common package that fixes one security issue is now available for JBoss Enterprise Application Platform 5.1.1 for Red Hat Enterprise Linux 4, 5, and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The jbossws-common package provides JBoss Web Services Native, a web service framework included as part of JBoss Enterprise Application Platform. It implements the JAX-WS specification.

It was found that JBoss Web Services Native did not properly protect against recursive entity resolution when processing Document Type Definitions (DTD). A remote attacker could exploit this flaw by sending a specially crafted HTTP POST request to a deployed web service, causing excessive CPU and memory consumption on the system hosting that service. If the attack is repeated to consume all available network sockets, the server will become unavailable. This flaw did not affect systems using JBoss Web Services CXF (provided by jbossas-ws-cxf). (CVE-2011-1483)

Warning: Before applying this update, please back up your JBoss Enterprise Application Platform's 'jboss-as/server/[PROFILE]/deploy/' directory, along with all other customized configuration files.

Users of JBoss Web Services Native should upgrade to this updated package, which corrects this issue. The JBoss server process must be restarted for this update to take effect.

ID	Name	Product	Family	Severity
418770	SCA: security update for org.jboss.ws:jbossws-common (GHSA-rj4p-7mm6-gm9j)	Tenable Cloud Security	SCA Checks	high
418770	SCA: security update for org.jboss.ws:jbossws-common (GHSA-rj4p-7mm6-gm9j)	Tenable Self-Hosted Container Security	SCA Checks	high
210144	RHEL 6 : jbossws-common (RHSA-2011:1303)	Nessus	Red Hat Local Security Checks	high
64002	RHEL 4 / 5 : jbossas (RHSA-2011:1309)	Nessus	Red Hat Local Security Checks	medium
64001	RHEL 4 / 5 : jbossws-common (RHSA-2011:1306)	Nessus	Red Hat Local Security Checks	medium
64000	RHEL 4 / 5 / 6 : jbossws-common (RHSA-2011:1301)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2011-1483

high

Tenable Plugins

high

high

high

medium

medium

medium